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1. Inolosed herewith is a report "Brief Security Estimate of Telecrypto", 
as requested. 

2. Also inclosed are comments on Cryptex Model Cl. 

3. Mr. Hagelin's letter is returned herewith. 




R. H. SHAW 
Head, AFSA-412 
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1 - Brief Security Estimate of Telecrypto 

2 - Comments on Cryptex Model Cl 



3 - Letter from Mr. Hagelin 
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BRIEF SECURITY ESTIMATE OP TELBCRYPTO 



1. Tele crypto is a key generator using th* M-209 pin wheel assembly (which 
step* as in M-209), 4 key cylinders and 12-bar drum. Th* toy oylindsrs 
ars stopped err&tioally by the teeth on the 12 bars of the drum which in 
turn are slid by the interaction of the pins and lugs. The selection of 
which key cylinder is to be used is controlled by a second reading position 
on 3 of the pin wheels. , 

2. AFSA 412B oonduotod A week's intensive security study of Teleorypto. 

This paper is a summary of the results of that study. 

5. Cryptographic Requirements. 

a. Daily Key, * Teleerypto has. many variables that mast be set daily, 
thereby creating many chances for operator error. The system, being 
a teletype system, does not psrait easy cheeking. The daily set-up 
published in a key list would have to oontain the following: - 

(1) Dally pin and lug set-up. 

(2) Daily setting of 128 plugs, 32 on each of four eylinders. 

(3) Daily setting of 4 "A* plugs between the cylinders and the selectors. 

(4) Daily setting of 3 n B" plugs to cheese the three selector pin wheels. 

e 

The lug set-ups Bust he carefully made up in order to assure 1 to 6 steps 
for each cylinder per half-turn of the drum, i.e., per operation of the 
machine. The fixed teeth in the model in the diagrams are probably not 
the beet arrangement possible but no natter what arrangement it used, lug 
patterns must be carefully derived. 

b. Message Alignments. - For eaoh message the pin wheels and cylinders must 
be set. If the cylinders are set for each message, there is a chance 
for off cylinder situations to occur whioh may lead to reconstruction of 
the maohine variables. To avoid such occurrences, the cylinders could 
be serolzed for each message. But this also leads to a bad situation 
heoauae, if the cylinders are set the same at the beginning of each 
message, the cylinders will step in and out of phase between messages, 
sines all eylinders step at approximately the same rate. This situation 
could become very dangerous. Therefore, either solution is undesirable. 
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BRIEF SEOTRITT ESTIMATE OF TELECRTPTO (continued) 
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6* Suamary. - Telocrypto requires too ouch set-up tins for it to be practical 
for use by the U«S, Armed Forces • A SAM 2-1 is less vulnerable to oryptanalytic 
attack so that Teleorypto would not be any improvement over the comparable 
system new in use* 
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cousins ON CaTPTEX MODEL Cl 



1. Cryptex, Model Cl is similar to T decrypt o but differs froa it in the 
feet that the pin wheel assembly in Telecrypto is the same as H-209 »nd in 
Cryptex, Model Cl is similar to the' nodi lied Hagelin with erratic stepping." 
The paper on Crypt ax, Model Cl is dated 5 August 1950 oik! therefore stay be n 
forerunner of Telecrypto. Perhaps there were difficulties in its manufacture 
with the more complicated erratic motion. 

2. The .security studies recently carried out by MrSA-lil2B mere all on Tele 




